Message 


From: Farak, Sonja (DPH) [/0=C0MM0NWEALTH OF MASSACHUSETTS/OU=DPH/CN=RECIPIENTS/CN=SFARAK] 

Sent: 6/23/2003 7:17:21 PM 

Subject: FW: HIPAA and DPH Confidentiality Policy and Procedures 

Importance: High 


—Original Message— 

From: Gonzalez, Melixza (DPH) 

Sent: Monday, June 23, 2003 2:46 PM 

To: DPH-DL-ADMIN-ALL-DPH-STAFF 

Subject: HIPAA and DPH Confidentiality Policy and Procedures 

Importance: High 


You have heard a lot about HIPAA and the DPH Confidentiality Policy and Procedures in recent months. We 
have added a HIPi\A page to the Department's web site (see http;//www.state.ma.us/dph/comm/hipaa/hipaa.htm 
), and included additional information on HealthNet (see http://healthnet/hipaa/hipaainfo.htm) regarding HIPAj\ 
and the Policy and Procedures. They include several FAQs (frequently asked questions) from various DPI] 
programs, and links to other sites. Please take a look at both. 

The Confidentiality Policy and Procedures can be found on HealthNet. Two new procedures were recently added 
(# 3 Use and Disclosure of Confidential Information was updated and # 7 De-Identification, IJmited Data Sets, and Abnegate 
Datasff 2 iS added). As many of you know, the Policy and Procedures are in a pilot period. It is essential that all DPH 
employees who work with confidential information review and implement the Policy and Procedures. We are 
recjuesting that over the next several months Bureaus take a close look at the Policy and Procedures and submit 
comments and suggestions. They will be revised after the pilot period, based on feedback submitted. Upon 
revision, training will be provided. This is your opportunity to be sure tliat the Policy and Procedures work for your 
Bureau's activities. Please make time to go to HealthNet and review them. Thank you, and please submit 
comments to John.Stewartl^state.ma.us 
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